Consumer Health Data Privacy Policy
Effective Date: August 9, 2026
Version: 1.0
1. Scope
This policy is issued by Annie Wright LLC and describes its handling of consumer health data on anniewright.com. It applies to website activity, courses, newsletters, and Search Annie’s Writing. It does not govern clinical records held by Annie Wright Marriage and Family Therapy, P.A., which are addressed by the practice’s Notice of Privacy Practices.
2. Consumer health data we collect
Because this website concerns mental health, information such as a clinical article you read, a therapy inquiry, a course you browse or buy, or text you enter in Search Annie’s Writing may reveal health-related interests or circumstances.
| Category | Purpose | How it is processed |
|---|---|---|
| Content interaction data | To understand aggregate site use and improve site operation. | Google Analytics 4 through Google Tag Manager after consent. |
| Therapy inquiry data | To answer an inquiry and route it to the P.A. intake process. | Website form and business email, then the P.A. intake process as applicable. |
| Course and product data | To process purchases, deliver courses, and handle support. | SamCart, the payment processors it uses on our behalf, and Teachable. |
| Search Annie’s Writing input data | To generate a response, maintain the tool, and review safety issues. | Pickaxe operates the widget and OpenAI supplies the model. |
| Email and subscription data | To send requested messages and manage subscriptions. | ActiveCampaign. |
| Device and connection data | Security, fraud prevention, and error diagnosis. | Hosting and analytics services as described in this policy. |
We do not collect precise geolocation, biometric identifiers, or clinical treatment records through this website. Please do not submit diagnoses, medication lists, medical records, or crisis details through a website form or Search Annie’s Writing.
3. Sources
We collect consumer health data directly from you, automatically from your device in line with your consent choices, and from service providers that process transactions, enrollments, or subscriptions for us. We do not buy consumer health data from data brokers.
4. Who receives consumer health data
| Recipient | Data and purpose |
|---|---|
| WP Engine | Website information in transit and server logs for hosting. |
| CookieYes | Consent record, consent identifier, IP address, and timestamp to record your choices. |
| Google Analytics 4 and Google Tag Manager | Content interaction and device information after consent, for site analytics and tag delivery. |
| ActiveCampaign | Email and subscription data for requested communications. |
| SamCart and the payment processors it uses on our behalf | Course and purchase information for checkout and payment processing. |
| Teachable | Enrollment and course progress for delivery. |
| Pickaxe and OpenAI | Search Annie’s Writing input data to operate the tool and generate responses. |
| Google Workspace | Therapy inquiries and information you email us. |
| Annie Wright Marriage and Family Therapy, P.A. | Therapy inquiry data you submit to reach the clinical practice. |
Pickaxe and OpenAI process Search Annie’s Writing information under their own published terms. Annie Wright LLC has not signed data processing agreements with either provider and does not control their independent handling of data on their systems. We have asked for written confirmation that inputs are excluded from model training and have not received it. Do not enter sensitive details in the tool.
5. Consent and no sale
We collect information needed to provide a product or service you request, such as a course purchase or therapy inquiry. We ask for consent before optional analytics technologies operate. You may withdraw an optional consent through Cookie Preferences or by emailing support@anniewright.com.
We do not sell consumer health data. We do not use advertising pixels or share consumer health data for advertising or cross-context behavioral advertising.
6. Your rights and requests
You may confirm whether we collect or share consumer health data, request access, request deletion, withdraw consent, and appeal a decision. Use the Data Rights Request page or email support@anniewright.com with “Consumer health data request” in the subject line.
We acknowledge requests promptly and no later than 10 business days. We respond within 45 days, with one additional 45-day extension where reasonably necessary. Authenticated deletion requests are completed within 30 days. We retain only information we must keep for legal obligations or to document the request.
7. Appeals
To appeal, reply to our decision or email support@anniewright.com with “Consumer health data appeal” in the subject line. Phoebe Cruz processes requests. Annie Wright reviews appeals from decisions Phoebe Cruz made. Outside counsel reviews any appeal of Annie Wright’s own decision. We provide a written decision within 45 days.
8. Security and geofencing
We use measures intended to protect consumer health data, including encryption in transit, access restrictions, two-factor authentication for administrative accounts, software updates, malware scanning, and backups. We do not use geofencing or collect precise geolocation.
9. Retention
| Category | Retention |
|---|---|
| Therapy inquiry data held by the LLC | 3 years from last contact. Once the P.A. handles an inquiry as a clinical intake, the P.A. retention rules apply. |
| Course and product data | For the life of the account plus 24 months. Transaction records are kept for 7 years. |
| Content interaction and analytics data | GA4 event data is retained no longer than 14 months. |
| Search Annie’s Writing input data | Ordinary Search Annie’s Writing conversations are retained for 12 months, then deleted. Crisis-flagged Search Annie’s Writing conversations are retained for 90 days, with human review within 7 days of the flag, then deleted. |
| Email and subscription data | Until you unsubscribe or request deletion, then removed within 30 days. Engagement history is retained for 24 months on a rolling basis. |
| Consent records | 3 years after consent ends. |
| Server logs | Retained for a limited period by our hosting provider and not used for marketing. |
10. Changes
We will post a revised policy with a new effective date when this policy changes. For a material change to data use, vendors, or crisis handling, we will notify affected known users by email. If a change requires consent, we will ask for it separately.
Related documents
Privacy contact: support@anniewright.com
